Privacy Policy

BCM Diary is an unofficial digital diary for members of the Baptist Church of Mizoram (BCM). It is made independently by Thatea Fanai under the BABFO ministry ("we", "us"). It is not produced or endorsed by the Baptist Church of Mizoram. The app is available for Android and as a web app at bcm-diary.web.app.

This policy explains what the app stores, where it is kept, and the choices you have. By using BCM Diary you agree to it. If you do not agree, please stop using the app.

1 What you keep in the app

Everything below is typed in by you and saved only on your device. We never receive it.

• Diary entries: your daily pages, with times, titles, tags and the "important" mark.
• Notes, your own calendar events (such as birthdays) and their reminders.
• My Details, if you fill it in: personal details (such as name, date of birth, blood group), church, contact and address details, document numbers (such as Aadhaar, PAN, bank account, insurance), an emergency contact, and an optional profile photo.
• Settings: theme, text size, App Lock, reminder times and similar choices.

How it is protected

• On Android, the diary is kept in an encrypted database (SQLCipher, 256-bit AES). The key is created on your phone and held in the Android Keystore.
• In the web app, the diary is kept in your browser's storage on that computer. Browser storage is not encrypted, so please use the web app only on a computer that is yours alone.
• App Lock (off by default) can ask for your fingerprint, face or device PIN, which your device checks; the app never sees your fingerprint or face. If you set a PIN inside the app instead, only a scrambled (salted hash) form of it is kept on the device.
• If you turn on the emergency card in My Details, your blood group and emergency contact are shown on the lock screen, so someone can help you without unlocking the app. It is off unless you turn it on.

2 Backup to your Google Drive (optional)

If you choose to connect Google Drive in More › Backup & Restore:

• You sign in with Google, and the app asks for one permission only: its own hidden app-data folder in your Drive (drive.appdata). It cannot see, open or change any of your other Drive files, and nobody else can open that folder.
• The backup holds your diary, notes, events, tags and My Details, so you can restore them on a new phone. It is made once a day, and each backup replaces the previous one.
• You can add a backup passphrase. The backup is then encrypted (AES-256-GCM) before it leaves your device, and cannot be opened by anyone without the passphrase, including us. A forgotten passphrase cannot be reset.
• The app keeps your Google account's email address on the device to show which account is connected. We do not receive it.

You can also save a backup file to a place you choose (for example, your phone's storage). That file is yours to keep or delete.

BCM Diary's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used only to save and restore your own backup, is never transferred to us or anyone else, and is never used for advertising.

3 When the app uses the internet

• BCM content updates. The app downloads updated BCM content (calendar, prayer guide, Ni Pawimawh, directory and statistics) from bcm-diary.web.app, which is hosted on Google Firebase. This is a download only: nothing about you or your diary is sent. Like any website, the hosting service may record basic technical details of each request (such as IP address and time) for security and operation, under Firebase's privacy terms.
• Google sign-in and Drive, only if you use Drive backup (see section 2).
• Links you tap, such as calling, WhatsApp or emailing someone in the directory, open your phone's own apps, whose own privacy policies apply.

BCM Diary has no analytics, no crash reporting, no advertising and no push-notification service. Reminders are scheduled on your device and work without the internet.

4 Exporting and sharing

When you export your diary as PDF or Word, or print it, the file is created on your device. If you then share it, your device's share screen sends it to the app you pick, under that app's privacy policy. Nothing is sent to us.

5 BCM content and the directory

The calendar, prayer guide, Ni Pawimawh, directory and statistics come from BCM's public publications. The directory shows the names and phone numbers of BCM leaders, pastors and missionaries as BCM has published them. If you are listed and would like a correction or to be removed, please contact us (see below) and we will update it in the next content update.

6 Device permissions

• Notifications: to show the reminders you turn on.
• Biometrics: for App Lock, only if you turn it on.
• Run at start-up: to set your reminders again after the phone restarts.
• Internet: for the uses in section 3.

7 What we share

We do not collect your diary or personal details, so there is nothing for us to share, sell or rent. We do not sell information to anyone and do not use it for advertising.

8 Keeping and deleting your data

Your data stays until you delete it. You can delete single entries in the app, delete everything by uninstalling the app (or clearing the browser's site data for the web app), and delete your Drive backup at any time. The steps are in the BCM Diary Data Deletion Policy.

9 Children

BCM Diary is meant for a general audience and is not directed at children under 13. We do not knowingly collect information from children; in fact the app sends us no personal information at all.

10 Changes to this policy

We may update this policy when the app changes. The new version will be posted on this page with a new "Last updated" date. If a change affects how your data is handled, we will also mention it in the app.

BCM Diary is an unofficial app, made independently by Thatea Fanai (BABFO).
It is not produced or endorsed by the Baptist Church of Mizoram. © 2026 BABFO.